1.权限控制–拦截器技术
当用户未登录时,不允许访问敏感操作,例如访问购物车/订单等系统,如何实现??
技术: 拦截器技术/ shiro
2. SpringMVC中的拦截器定义
说明:拦截器一般只拦截web页面资源的请求.
- 拦截器处理流程图
- 拦截器源码
public interface HandlerInterceptor {
default boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
throws Exception {
return true;
}
default void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler,
@Nullable ModelAndView modelAndView) throws Exception {
}
default void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler